Permit.io published a practical checklist mapping SOC 2 CC6/CC7 and ISO 27001 Annex A access controls to AI agents, arguing that existing compliance evidence models assume human users with provisioned…
Tessl completed a SOC 2 Type II audit conducted by independent auditor A-Lign, the company announced. The audit covers access controls, continuous infrastructure monitoring and incident response, empl…
Sierra announced it has achieved AIUC-1 certification for its AI agents following an independent audit by Schellman and testing by the Artificial Intelligence Underwriting Company (AIUC). The AIUC-1 s…
Vanta has released Agentic Trust Controls, an open-source library of 65 controls for AI agent governance, expanding its early-access version from 61 controls and mapping to ISO 27001 and ISO 42001. Th…
LangWatch, an open-source testing, evaluation, and observability platform for AI agents, offers simulation-based testing, adversarial red-teaming, and OpenTelemetry-native observability. The platform,…
ISO 27001, SOC 2, and NIST frameworks were designed for human-centric workflows and fail to account for AI coding tools, leaving audit trails incomplete. A developer highlights that AI sessions lack a…
A new position paper on arXiv (2608.14568v1) argues that AI governance must be built on ISO-like interoperability protocols rather than laws alone, citing the fragmentation caused by the EU AI Act, Ch…
Nitro Software, maker of Nitro PDF, positions its product as a cost-effective alternative to Adobe Acrobat for teams in 2026, claiming businesses can save up to 30% compared to Adobe. The company high…
Snowflake has introduced Multi-Party Approval (MPA), a governance feature for Business Critical and Enterprise accounts that requires a second authorized approver before any protected action—such as d…
AuditBadger, an AI-powered compliance platform, enabled its founder to achieve both SOC 2 Type I and SOC 2 Type II certifications, with the tool drafting compliance policies and automating evidence co…
Chron, an MCP server that logs and audits AI-assisted coding sessions, has surpassed 6,000 downloads. The tool, built by a developer to address compliance gaps such as SOC 2 evidence requirements, rec…
A new guide evaluates eight audit logging platforms for B2B and agentic AI applications, highlighting the need for compliance tools that can handle AI-native features like massive payloads and non-det…
A developer built GAUNTLEX, an open-source adversarial co-generation engine that tests software specifications before code is written, addressing security gaps in large-scale legacy modernization proj…
DocuPipe launched a free PDF redaction tool that uses AI to detect sensitive text and permanently removes it by flattening the PDF and deleting the text layer, preventing the common failure of cosmeti…
Brian, a former Vanta employee, launched Halo, an open-source tool that records AI agent actions in a tamper-evident, hash-chained log to enable runtime auditing. The tool addresses the challenge of v…
ISO/IEC 42001:2023, the first international standard for an Artificial Intelligence Management System (AIMS), requires organizations to formally determine their role as AI producer, provider, or user …
LG AI Research has obtained ISO 27001 certification for information security across the AI lifecycle, strengthening its position in secure AI systems. The company plans to expand into regulated sector…
A developer launched Finisma, a free web tool for German B2B compliance that converts PDF invoices into ZUGFeRD/Factur-X e-invoices and verifies them. The tool uses LLM-based field extraction, perform…
Data accuracy, defined as how correctly information reflects real-world values, is critical for reliable decision-making, compliance, and operational efficiency. Engineers are advised to implement val…
Faultline Security offers manual penetration testing for startups and SaaS companies, priced from €3,000, to help them pass Series A security due diligence. The service provides clear scope, fixed pri…